Privacy Policy
Last updated: November 2026. This Privacy Policy explains how the Zepsmart platform collects, processes, and protects personal information across our web applications and dedicated portal subdomains.
1. Scope and Covered Services
This policy applies to all interactions across the Zepsmart ecosystem, including our company landing portal (main.rachyitafoundation.com), Customer Marketplace (customer.rachyitafoundation.com), Merchant Store Portal (shop.rachyitafoundation.com), Delivery Partner Portal (delivery.rachyitafoundation.com), and Platform Administration (admin.rachyitafoundation.com).
2. Information We Collect
A. Authentication & Account Information
We use mobile number verification for passwordless sign-in. We collect your 10-digit Indian mobile number to dispatch one-time verification passwords (OTPs) and generate session tokens.
B. Customer Order & Delivery Data
When placing an order, we collect delivery destination details (street address, city, state, postal code, recipient contact phone) and cart selections necessary for order fulfillment and dispatch.
C. Merchant Application & KYC Records
Merchants submitting store onboarding applications provide trade names, business legal entity names, store physical addresses, Permanent Account Numbers (PAN), and uploaded business proof files (e.g., GST registration certificates or trade licenses).
D. Delivery Partner Fleet Data
Prospective delivery partners provide vehicle type, registration plate number, driving license details, and operating area for fleet verification.
3. Purpose and Use of Information
We process information solely for platform operations:
- Authenticating user sessions and validating user roles (customer, merchant, delivery partner, administrator).
- Routing customer orders directly to local neighborhood merchants and coordinating fleet dispatch.
- Executing dual-handshake security protocols: merchant pickup verification codes and customer delivery OTPs.
- Reconciling financial settlement batches and audit logs.
- Communicating operational status updates and customer service inquiries.
4. Data Storage and Security Measures
Zepsmart employs industry-standard security practices to protect user information:
- Transport Encryption: All subdomain traffic is encrypted using TLS / HTTPS protocols.
- Private Document Storage: Business licenses and identity proof uploads are stored in private disk directories protected from direct public HTTP access.
- Access Controls: Database records and administrative functions are restricted through authenticated role-based middleware.
5. User Inquiries and Privacy Contact
Users may request correction of profile information or deletion of delivery addresses by contacting platform support at our Contact & Support page.